IN THE CLAIMS 

1. (Currently Amended) A system for identifying users of a plurality of computers 
within an organization's communications network by matching user identification 
information from an organization's directory information with user identification information 
and current Internet Protocol addresses extracted by a discovery apparatus, comprising: 

a database storing the organization's directory information, the organization's 
directory information including user identification information but not requiring a list of 
devices; 

a discovery apparatus for extracting user identification information and associated 
Internet Protocol addresses, having at least one connection to a primary switch in the 
communications network for passively monitoring traffic thru the primary switch; and 

a server, connected to [the] a name discovery apparatus and having access to the 
database via the communications network, the server having a s e rv e r proc e ss capable of 
matching the user identification information from the organization's directory information 
with the user identification information and current Internet Protocol addresses extracted by 
the discovery apparatus, creating a r e lationship b e tw ee n the directory information and 
automatically determining which contacts in the organization's directory information are 
currently using each of the extracted curr e nt Internet Protocol addresses of computers 
curr e ntly in us e by a contact in th e dir e ctory information . 

2. (Previously Presented) The system of Claim 1, wherein the communications 
network is a local area network. 

3. (Previously Presented) The system of Claim 2, wherein the local area network is 
an Ethernet network. 

4. (Deleted) 

5. (Previously Presented) The system of Claim 1, further comprising: 
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a central repository, accessible by the discovery apparatus and a Web server, for 
storing the traffic monitored by the discovery apparatus. 

6. (Previously Presented) The system of Claim 1, wherein the database is a formatted 
database. 

7. (Previously Presented) The system of Claim 1, wherein the database contains the 
following fields of data: (i) First Name and Last Name; and (ii) electronic mail address 
and/or user name. 

8. (Currently Amended) The system of Claim 1, wherein the server proc e ss is a Web 
server proc e ss capable of responding to browser-based queries to identify which user is using 
which computer. 

9. (Currently Amended) The system of Claim 7, wherein the database also contains 
one of the following fields of data: (i) Middle Initial; (ii) Nick Names; (iii) Name Aliases; 
(iv) Building; (v) Room; (vi) Permanent E-mail; (vii) Temporary E-mail; or (viii) 
Affiliation/Organizatio n: or (ix) any combination thereof . 

10. (Currently Amended) A method for identifying users of a plurality of computers 
within an organization's communications network by matching user identification 
information from an organization's directory information with user identification information 
and current Internet Protocol addresses extracted by a discovery apparatus , the method 
comprising the steps of: 

monitoring traffic through a primary switch in the communications network; 

extracting user identification information and associated Internet Protocol addresses 
from the monitored traffic; 

accessing a database of the organization's directory information, the organization's 
directory information comprising user identification information but not requiring a list of 
devices; and 
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matching the user identification information from the organization's directory 
information with the user identification information and current Internet Protocol addresses 
extracted by the discovery apparatus, cr e ating a r e lationship b e tw ee n th e _dir e ctory 
information and curr e nt automatically determining which contacts in the organization's 
directory information are currently using each of the extracted Internet Protocol addresses^ef 
comput e rs curr e ntly in us e by a contact in th e dir e ctory information . 

11. (Previously Presented) The method of Claim 10, further comprising the step of: 
storing the user identification information and associated Internet Protocol addresses 

in a central repository. 

12. (Previously Presented) The method of Claim 1 1, further comprising the steps of: 
accessing the central repository; and 

producing a data file, on a pre-determined time interval, the data file containing 
information on which user used which computer during the pre-determined time interval. 

13. (Previously Presented) The method of Claim 32, wherein the extracting step 
comprises the step of: 

using pattern matching based upon a known electronic mail protocol and/or 
authentication protocol to extract the electronic mail address and/or user name and associated 
Internet Protocol address from the monitored traffic. 

14. (Deleted) 

15. (Previously Presented) The method of Claim 10, wherein the communications 
network is a local area network. 

16. (Previously Presented) The method of Claim 15, wherein the local area network 
is an Ethernet network. 

17. (Deleted) 
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18. (Previously Presented) The method of Claim 10, wherein the database is a 
formatted database. 

19. (Previously Presented) The method of Claim 10, further comprising the step of: 
receiving, via the communications network, a query to identify a user of a computer 

within the communications network, the query including an Internet Protocol address; and 

responding to the query using the matching of a subset of the extracted Internet 
Protocol addresses with a subset of users, using the received Internet Protocol address. 

20. (Previously Presented) The method of Claim 10, wherein the database contains 
the following fields of data: (i) First Name and Last Name; and (ii) electronic mail address 
and/or user name. 

21. (Previously Presented) The method of Claim 20, further comprising the step of: 
receiving, via the communications network, a query to identify a user of a computer 

within the communications network, the query including at least one of the fields of data; and 

responding to the query using the matching of a subset of the extracted Internet 
Protocol addresses to a subset of users and using a received field of data. 

22. (Currently Amended) A computer program product comprising a computer 
usable medium having instructions and control logic stored therein for causing a computer to 
execute instructions to identify users of a plurality of terminals within an organization's 
communications network by matching user identification information from an organization's 
directory information with user identification information and current Internet Protocol 
addresses extracted by a discovery apparatus, the control logic comprising: 

first computer readable program code means for causing the computer to monitor 
traffic through a primary switch in the communications network; 
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second computer readable program code means for causing the computer to extract 
user identification information and associated Internet Protocol addresses from the monitored 
traffic; 

third computer readable program code means for causing the computer to access a 
database of the organization's directory information^ the organization's directory information 
comprising user identification information but not requiring a list of devices; and 

fourth computer readable program code means for causing the computer to match the 
user identification information from the organization's directory information with the user 
identification information and current Internet Protocol addresses extracted by the discovery 
apparatus; 

wherein the matching cr e at e s a r e lationship b e twe e n th e dir e ctory information and 
eurrerrt automatically determines which contacts in the organization's directory information 
are currently using each of the extracted Internet Protocol addresses of comput e rs curr e ntly in 
us e by a contact in the directory information . 

23. (Previously Presented) The computer program product of Claim 22, further 
comprising: 

fifth computer readable program code means for causing the computer to store the 
extracted user identification information and associated Internet Protocol addresses in a 
central repository. 

24. (Previously Presented) The computer program product of Claim 23, further 
comprising: 

sixth computer readable program code means for causing the computer to access the 
central repository; and 
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seventh computer readable program code means for causing the computer to create a 
data file, on a pre-determined time interval, the data file containing information on which 
user used which terminal during the pre-determined time interval. 

25. (Previously Presented) The computer program product of Claim 33, wherein the 
second computer readable program code means comprises: 

fifth computer readable program code means for causing the computer to perform 
pattern matching based upon a known electronic mail protocol and/or authentication protocol 
to extract the electronic mail address and/or user name and the associated Internet Protocol 
address from the monitored traffic. 

26. (Deleted) 

27. (Previously Presented) The computer program product of Claim 22, wherein the 
database is a formatted database. 

28. (Previously Presented) The computer program product of Claim 22, further 
comprising: 

fifth computer readable program code means for causing the computer to receive, via 
the communications network, a query to identify a user of a terminal within the 
communications network, the query including an Internet Protocol address; and 

sixth computer readable program code means for causing the computer to respond to 
the query using the matching of a subset of the extracted Internet Protocol addresses with a 
subset of users, using a received Internet Protocol address. 

29. (Previously Presented) The computer program product of Claim 22, wherein the 
database contains the following fields of data: (i) First Name and Last Name; and (ii) 
electronic mail address and/or user name. 

30. (Previously Presented) The computer program product of Claim 29, further 
comprising: 
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fifth computer readable program code means for causing the computer to receive, via 
the communications network, a query to identify a user of a terminal within the 
communications network, the query including a field of data; and 

sixth computer readable program code means for causing the computer to respond to 
the query using the matching of a subset of the extracted Internet Protocol addresses with a 
subset of users, using the fields of data. 

31. (Previously Presented) The system of Claim 1, wherein the user identification 
includes an electronic mail address and/or a user name. 

32. (Previously Presented) The method of Claim 10, wherein the user identification 
includes an electronic mail address and/or a user name. 

33. (Previously Presented) The computer program product of Claim 22, wherein the 
user identification includes an electronic mail address and/or a user name. 

34. (Currently Amended) The method of Claim 20, wherein the database also 
contains one of the following fields of data: (i) Middle Initial; (ii) Nick Names; (iii) Name 
Aliases; (iv) Building; (v) Room; (vi) Permanent E-mail; (vii) Temporary E-mail; or (viii) 
Affiliation/Organization ; or (ix) any combination thereof . 

35. (Currently Amended) The computer program product of Claim 29, wherein the 
database also contains one of the following fields of data: (i) Middle Initial; (ii) Nick Names; 
(iii) Name Aliases; (iv) Building; (v) Room; (vi) Permanent E-mail; (vii) Temporary E-mail; 
or (viii) Affiliation/Organization : or (ix) any combination thereof . 
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